Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
File: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft (raw, json)
Hash identifier: 264CBoLPXg1Xg3eGWip1euxUdAx8hCMmqRNdbjyIkbU=
Subject key identifier: 14:12:53:C1:F1:8A:74:94:B0:07:18:15:20:1E:0D:3B:1F:23:77:B4
Authority key identifier: DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
Certificate issuer: /CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Certificate serial: 019A4DE1A5BF54A72C2ADCD1D8EFD8F5B487
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
Manifest number: 13E0
Signing time: Tue 04 Nov 2025 08:00:24 +0000
Manifest this update: Tue 04 Nov 2025 08:00:24 +0000
Manifest next update: Wed 05 Nov 2025 08:00:24 +0000
Files and hashes: 1: 2VevK0HBk8qY35gQ5UtjfqrB3nY.roa (hash: AmV1BLqc7vTs/6UGFEgRF0w9AuqYNGKRtxRFQd+4rZ8=)
2: 3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl (hash: 44cYre1VfWFZE3gZNylN0bFKKWqJ5dF8FP0yv3Iv2oc=)
3: 5vHG0OxzvrqhI56hWt2APxlEca8.roa (hash: bzsGlpjOWPgo9xk0iMmmEBroNlHWE3HqNZ6pialCu6g=)
4: gr8V9GG2sn3v6HXV22VsNMEvx-4.roa (hash: sigWijBONNzFo5YlkJnYB4sz+kl8GULVAa+gCk4rEkg=)
5: v3bh2N4thqCv2jw1YX5PjUcZEd0.roa (hash: nIfMLuntg2xncQRj0ShSY9tFssqvjsfpfyRvdL0VSvM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4d:e1:a5:bf:54:a7:2c:2a:dc:d1:d8:ef:d8:f5:b4:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc3cb20c5ca7c4ed8e42078b1a67287a0d991cec
Validity
Not Before: Nov 4 08:00:24 2025 GMT
Not After : Nov 5 08:00:24 2025 GMT
Subject: CN=141253c1f18a7494b0071815201e0d3b1f2377b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:60:2e:37:28:6b:be:09:18:e6:53:be:18:0b:
c9:af:fd:b3:93:1a:d1:ed:07:4d:bc:7c:49:f3:88:
7c:1e:c8:0d:14:80:63:22:26:f9:1b:76:bc:8d:fd:
d2:0b:5e:d3:be:0a:bc:00:97:fe:a1:76:c4:77:07:
17:0c:bb:80:0b:f7:5e:73:24:1f:e9:3a:fc:b5:8d:
97:e0:69:8e:23:6c:78:6c:99:0a:89:4c:f6:7c:ca:
88:ce:f7:b1:05:68:d1:cc:8c:30:3f:22:f0:80:cf:
b5:72:dc:38:4a:dd:db:52:22:db:5a:11:96:2e:a1:
2c:45:ae:56:56:16:37:45:f0:75:4f:c6:e0:c1:54:
e0:a1:47:ab:a7:00:b0:c0:0e:4b:29:95:14:e9:57:
b3:64:82:d7:ba:70:e2:41:d2:e7:08:1d:70:9e:6c:
f0:53:40:80:dc:4b:77:8a:b8:3b:00:95:22:77:1a:
b4:8b:c3:c8:34:a3:6b:d5:80:36:0c:b9:78:75:54:
02:69:cf:99:03:5e:71:51:99:16:a0:07:84:df:70:
81:89:00:4d:8b:5c:cc:cd:8d:8d:bb:ee:0e:76:64:
20:40:2b:05:75:46:72:3d:d0:fe:2a:92:80:bb:9b:
b5:e8:dc:78:1b:bd:0d:14:66:43:5a:9a:b9:15:00:
6d:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:12:53:C1:F1:8A:74:94:B0:07:18:15:20:1E:0D:3B:1F:23:77:B4
X509v3 Authority Key Identifier:
keyid:DC:3C:B2:0C:5C:A7:C4:ED:8E:42:07:8B:1A:67:28:7A:0D:99:1C:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DyyDFynxO2OQgeLGmcoeg2ZHOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/a85f3d-65a2-4f6c-9cb9-82660ee4eac4/1/3DyyDFynxO2OQgeLGmcoeg2ZHOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:00:ae:25:dc:b8:c5:76:46:e7:ca:4e:55:58:53:cd:36:04:
db:91:86:53:5c:dc:4a:0a:f7:44:ec:11:88:de:8d:22:f4:50:
41:85:1e:6a:c7:0f:24:4c:9c:61:a2:f3:33:6a:45:04:a3:8f:
e5:b8:2c:3a:27:d2:45:46:0b:dc:63:a7:a4:75:30:28:e7:d2:
1b:a7:34:6f:83:36:48:2b:d8:83:44:e8:95:b7:bc:54:bc:97:
1d:91:7a:57:9c:46:f7:d0:3e:f9:57:02:bd:e7:6b:e3:2d:fe:
e3:66:ab:95:26:ac:f1:09:7c:ea:9f:08:be:aa:a7:b6:e9:4e:
a7:b0:5b:27:bf:69:d3:af:29:a6:1b:5f:02:05:a4:84:3f:30:
d0:3b:8d:cb:15:1b:eb:7f:25:5b:6a:ea:59:97:c5:c2:f9:c9:
e7:d6:01:7c:db:99:41:cb:01:7d:e9:e1:b4:65:f6:d8:6f:f6:
df:2f:a8:e4:4a:18:b0:a2:a1:af:ac:3f:7a:94:a6:3f:b4:2b:
c6:5c:38:7f:83:b7:75:ee:3f:e0:19:43:b0:5f:f2:75:3d:ef:
2d:d8:b2:4f:c9:f9:08:07:80:7c:dd:04:b1:5a:44:f0:a1:0d:
14:c9:c2:af:c8:42:e5:ae:99:86:e2:79:6a:81:0e:c1:51:9a:
c8:9f:19:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:35:48 2025 by rpki-client